Skip to Main Content

APEX

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

How to configure 'ras policy' with rasadm for Apex applications APP_USER?

PaavoOct 3 2019 — edited Jan 23 2020

Hi

Oracle Database 12c Enterprise Edition Release 12.2.0.1.0 - 64bit Production

ApexVersion = "19.1.0.00.15"

ORDS 18.4.0.r3541002

FYI decided to give rasadm a try:

APEX19.1 rasadm-ins.sql fails to existing admin user and existing 111 application id

APEX19.1 and rasadm popup lovs problem - is there patch?

After fixing rasadm it started to work I managed to fiddle with it but faced that only what I can achieve is to make data to disappear both on Sqldeveloper and Apex + to get it back for enabled policy with owner override.

But couldn't figure out how to convey Apex applications already sso authenticated APP_USER How to define sql predicate with rasadm - howto for apex application?

I am missing the steps /howto to make it happen:

  • Apex instance has ras enabled
  • for test apex applications authentication scheme (sso)
    • enabling ras with ras mode "internal users" and by selecting "dynamic roles" or "namespaces" - basically blocks access due 'misconfiguration' of those
    • ras disabled allows to use the app and the rasadm policy configs have impact on the 'visiblity' to the data

Do I have to set ras session in the session init plsql ?

And how to configure plsql package+function which could be used as 'sql predicate' for e.g. column_x = v('APP_USER') type of matching?

With VPD I am able to accomplish, but as said the RAS looks promising.

rgrds Paavo

This post has been answered by Christian Neumueller-Oracle on Oct 12 2019
Jump to Answer
Comments
Post Details
Added on Oct 3 2019
13 comments
935 views